Diagram of Report Having Group-Level Security 
1 



Security Rule 
110 



Security Rule 
112 



Security Rule 
114 



East/NY/CustA 



Customer A 



(1) 



East/NY/CustA 



Customer A 



(2) 



East/NY/CustB 



Customer B 



(1) 



East/NY/CustC 



Customer C 



East/NY/CustC 



Customer C 



Page Subset 
104 



Page Subset 
.106 




Pages in 
page subset 
116 



Page Subset 
108 



FIG. 1 




REPORT 



App. No: 09/450,813 Filed: November 29, 1 999 ^ 
Inventors: Rogers, et al. 
AttyDkt: ACTUP002 
Sheet 2 of 16 



200 



FIG. 2 



RAGE LIST 



.202 



208, 
210. 



PAGE 



204 



212 



CX)NTROL 



214 



(X)lsrTFlOL 



216 



FLOW 



PAGE 



^206 

• • • 



226 



218 



Rame 



REPORT SECTION -, 



222 



228 



220 



Frame 



COhHROL 



224 



CONTROL 



GROUND LEVEL 
BREAK FIRST LEVEL 



FRAME 



.232 



>- FRAME ^234 



LEVEL BREAK AT 
SECOND LEVEL 



236 
240 



FRAME 



FRAME FOR 
THIRD LEVEL 



FRAME FOR 
THIRD LEVEL 



242 



244 



238 



LEVEL BREAK AT 
SECOND LEVEL 



LEVEL BREAK 
AT FIRST LEVEL 



230 




App. No; 09/450,813 Filed: November 29, 1 999 
Inventors: Rogers, et al. 
AttyDkt: ACTUP002 
Sheet. 3 of 16 



(I^^START 



RUN PROGRAM TO VIEW RESULTS 



ESTABLISH QUERY(S) 



ESTABLISH R^GE FORMAT(S) 



ESTABLISH LEVEL BREAKS 



ESTABLISH FRAME LAYOUT 



GENERATE DESIGN FILE 



GENERATE PROGRAM FROM 
DESIGN FILE AND CLASS LIBRARY 



COMPILE PROGRAM 



GET ANY PARAMETERS 
REQUIRED TO REFINE 
THE QUERY/REPORT 



RUN PROGRAM TO CREATE 
REPORT OBJECT 



ESTABLISH A DATABASE 
CONNECTION 



302 



304 



306 



308 



310 



312 



314 



316 



318 



320 



322 




FIG. 3 




r 



App. No: 09/450,813 Filed: November 29, 1999 
Inventors: Rogers, et al. 
AttyDkt: ACTUP002 
Sheet 4 of 16 



404 



Executives 



REGION W 
MANAGER 



REGION E 
MANAGER 



REGION I 
MANAGER 



.406 



408 



STATE 1 
MANAGER 



STATE 1 
MANAGER 



STATE 1 
MANAGER 



SALES RER 
122 



SALES RER 
123 



412 



SALES RER 
124 



410 



CUSTOMER 
A14C 



CUSTOMER 
B23F 



CUSTOMER 
A54G 



FIG. 4A 



414 




422 

Region Office Sales Rep. Customers 



E 


State 1 Mngr. 


S.R. 123 


A14C 


• • • 


416 418 420 
(1 St level break) (2nd level break)(3nd level break) 


B23F 




A54G 



FIG.4B 



App. No: 09/450,813 Filed: November 29, 1 99^ 
Inventors: Rogers, et al. 
Atty Dkt: ACTUP002 
Sheet 5 ofl^; 




FIG. 5 




602 



SET-UP SECURITY SYSTEM 
USING "USERS" AND "ROLES" 



604 



FOR EACH ROW OF 
DATA, IDENTIFY A 
SET OF ROLES 



SORT DATA BASED ON 
LEVEL BREAKS 



606 



MAP VALUE OF DATA COLUMN IN 
DATA ROW TO EXTERNAL 
ROLES (604) 



■608 



APPLY SECURITY TO PAGES SO 
PAGES ARE TAGGED BY 
SIDs DEFINED IN 
SECURITY SYSTEM 



610 



c 



DONE 



FIG. 6 



Bp p.'fef-ilSUBCLASS 



702 



704 



706 



App.No: 09/450.813 Filed: November 29, 1999 i 
Inventors: Rogers, et al. 
AttyDkt: ACTUP002 
.Shep.t 7 of 1 



REATING A SECURIT 
RULE FOR A PAGE 





RETRIEVE A SECURITY 
IDENTIFIER FOR EACH LEVEL 
BREAK GROUP FOR WHICH 
ROW IS A MEMBER 



CONCATENATE ALL 
SECURITY IDENTIFIER (SIDs) 

TO CREATE AN ACL 
(security rule) 



I 



ASSOCIATE SECURITY 
RULE WITH A PAGE 



DONE 



FIG. 7 



802 



804 



806 



808 



VIEWING REPORT 



OBTAIN USER SIDs 
USER LOGIN: USERID 
AND 0 OR MORE ROLES 



RETRIEVE REPORT 
(WITH ASSOCIATED ACLs) 



APPLY FILTER; 
DERIVE SUBSET OF PAGES 



i 



VIEW REPORT CONSISTING 
OF SUBSET OF PAGES 



c 



DONE 



FIG. 8 



?sfjaUBCLASSl 
2DCZ 



App. No: 09/450,813 Filed: November 29. 1999 
Inventors; Rogers, et al. 
AttyDkt: ACTUP002 
Sheet 8 of 1 6 



FIG.9B 



CREATE LIST OF 
USER SIDs 



SELECT A USER 



J 



910 



STORE USER ID AS FIRST SID 



911 



DETERMINE ROLE IN WHICH 
USER DIRECTLY BELONGS 



912 



STORE DIRECT ROLES AS 
SECOND SIDS 



If 



914 



DETERMINE OTHER 
INDIRECT ROLES FOR USER 



916 



STORE INDIRECT SIDs 



IT 



918 



COMBINE SIDs TO 
CREATE USER ACL 



920 



902 



FIG. 9A 

900 
^ 904 



USER AND 


"BELONGS 


ROLE 


TO" 


Role 1 


Role 2 






FJones 


Role 2 


Role 2 


Role 3; Role 4 


UserlDS 


Role 4 


Role 3 


[NULL] 


Role 4 


[NULL] 















fAPRI 



^AHXaBJNg 2002- S?4- ' — '■ ^ 



App. No: 09/450,813 Filed: November 2 
Inventors: Rogers, et al, 
AttyDkt; ACTUP002 
-Sheet Onf 16 



mm 



FIG. 10 



EXTERNAL 
MAPPING FOR A 
DATA ROW COLUMN 



1 


r 


REVIEW DATA ROW FORMAT TO 
DETERMINE COLUMN; EXAMINE 
DATA VALUES IN COLUMN 




r 


REVIEW SECURITY SYSTEM TO 
DETERMINE NAMES USED FOR 
ROLES MATCHING COLUMN VALUES 




r 


CREATE MAPPING TRANSFORMATION 
RULES USING NAMES IN SECURITY 
SYSTEM AND COLUMN VALUES 




r 


APPLY MAPPING RULE TO EACH 
COLUMN (LEVEL BREAK) TO 
CREATE TRANSLATED ACL 



\1 



002 



004 



006 



008 



y 

(;^DONE^^ 




pp. No: 09/450,813 Filed: November 29, 19( 
Inventors: Rogers, et al. 
AttyDkt: ACTUP002 
Sheet in of 16 




RETRIEVE REPORT 
OBJECT FOR SELECTED 
REPORT 



RETRIEVE USER ACL 



CREATE PHYSICAL PAGE 
MAP FOR REPORT USING 
ACL MATCH RULE 



LOOP EACH ENTRY 
IN THE PHYSICAL 
PAGE MAP 



CIS VALUE FROM PHYSICAL 
PAGE MAP ONE? 




1102 



1104 



1108 



1109 




1110 



FIG. 11A 



1 !|C»;^iSUBCLASS' 



it V\ 



r 



App. No: 09/450,813 Filed: November 29 J 
Inventors: Rogers, et al. 
AttyDkt: ACTUP002 
Sheet. 11 nf 16 



OCT 2 9 2002 ^ 




B 



CREATE CELL IN 
VISIBLE PAGE MAP 



1112 



REPLACE CONTENT OF 
CELL IN PHYSICAL MAP 
WITH VISIBLE INDEX VALUE 



1114 




1110 
FIG. 11A 



N 



FIG. 11B 




r OCT 11 2002 K 



App. No: 09/450,813 Filed: November 29, 
Inventors: Rogers, el al. 
AttyDkt: ACTUP002 
.Shef-.t 11 nf 1 







o 


o 




o 






in 




-> 























o 

CVJ 



CD 

in 

CO 

cvi 



CVJ 



CO 



CVJ 



X CVJ 
S CM 



in 



CO 



CVI 



CVJ 



CO 



CD 



in 



00 

■a 



o 

CD 



CO 
CVI 




Table of Contents 



App. No: 09/450,813 Filed: NovemW 
Inventors: Rogers, et al 
AttyDkt: ACTUP002 
Sheer 1 of 16. 



1202 



1204 

1214 Region 
^East 



1206 

^Office 



1208 



1210 1212 

Sales Representative ^ Customer ^ 



1218 

^ New York 



1220 



Connecticut 



SI 23 



SI 24 



SI 25 



SI 26 



ABC Co. 
XYZ Co. 
DEF Co. 

GHCo. 

LMCo. 

PQ Co. 

ST Co. 

UV Co. 



Page 

2 
2 
5 
8 

13 
18 
23 
31 
37 
45 



1216 



Central 



108 



FIG. 12A 



pp. No: 09/450,813 Filed: November 29. 19< 
Inventors: Rogers, et al. 
AttyDkt: ACTUP002 



mm 



1222 



1224 



REPORT 



1226 



EAST 



1230 



NEW YORK 



SI 23 



AABC Co. I 



IDEF Co- 



Si 24 



GH Co. 



LM Co. 



PQCO. 



1232 



CONNECTICUT 



1234 

ST25~1 ' 1236 

— 1ST Co. t ' 

1238 

— luvco. r -^ 



H S126 I 



1228 



CENTRAL 



FIG. 12B 




13UBCLASS 



App. No: 09/450.813 Filed: Noveml 
Inventors: Rogers, etal. 
AttyDkt: ACTUP002 
Sheet 15 of ] 6 



c 



CREATING A TABLE 
OF CONTENTS 



RETRIEVE PHYSICAL PAGE MAP 
FOR USER 



RETRIEVE NEXT TOG NODE FROM 
TOG NODE HIERARCHY 
AND DETERMINE NODE PAGE RANGE 




DOES ANY PAGES MARKED 
VISIBLE IN MAP FALL IN 
TOC PAGE RANGE? 



SOME 



KEEP ENTIRE 
NODE FOR 
INCLUSION 
IN TOC 




1314 



KEEP ENTIRE 
NODE FOR 
INCLUSION 
IN TOC 



X 



1302 



1 



1304 



1306 




1 



1308 



EXCLUDE 
ENTIRE NODE 
FROM TOC 



ANY REMAINING 
TOC NODES IN 
HIERARCHY? 

NO 




c 



DONE 



FIG. 13 



App. No: 09/450,813 Filed: Novemb| 
Inventors: Rogers, et al. 
AttyDkt: ACTUP002 
Sheet 16 of 16 




